Privacy policy

This policy explains what personal information KT Secure collects through this website and when you contact us, why we collect it, who we share it with, how long we keep it and the rights you have over it.

Who we are

KT Secure, 73 Cornhill, London EC3V 3QQ, United Kingdom.

KT Secure is the controller of the personal information described in this policy. You can contact us about this policy or your information at info@ktsecure.co.uk, by post at the address above, or by phone on +44 (0)20 7889 0888.

What we collect

When you brief our team

The form on this website asks for:

• your name, work email address and company (required)
• your role and phone number (optional)
• what you are working on, in your own words
• whether a partner introduced you to us (optional)

Please do not include sensitive personal information, or confidential technical detail you would not want sent by email, in the form. We can arrange a secure channel once we are in touch.

When you contact us directly

If you email, phone or write to us, we keep the details you give us and our correspondence with you.

When you visit the website

Our hosting provider records standard technical information for every request to the website, such as your IP address, browser type, the page requested and the time. We use it to keep the website secure and running. It is not used to identify you or to build a profile of you.

If you accept analytics cookies, Google Analytics collects information about how you use the website, such as the pages you visit, how long you stay, the type of device and browser you use, your approximate location (town or country level) and the website that referred you. We use this in aggregate to improve the website. Our cookie policy explains the cookies involved and how to change your choice.

Why we use it, and our lawful basis

What we do	Lawful basis under UK GDPR
Reply to your brief or enquiry and discuss whether we can help	Our legitimate interest in responding to business enquiries, or taking steps at your request before entering into a contract
Provide services and manage our relationship with clients	Performance of a contract
Keep the website and our systems secure	Our legitimate interest in running a secure, reliable website
Measure and improve how the website is used, with Google Analytics	Your consent, which you can withdraw at any time through Cookie settings
Keep records we are required to keep, and respond to lawful requests	Legal obligation

We will not add you to a mailing list or send you marketing unless you have asked us to. We never sell personal information.

Who we share it with

We share personal information only where we need to, and only with:

• Netlify, Inc., which hosts this website and receives form submissions on our behalf
• Google LLC, which provides Google Analytics, if you accept analytics cookies
• the providers of our email and business systems, who process information on our instructions
• delivery partners, where you ask us to involve them or agree to it (for example, partners we work with in the Gulf region)
• professional advisers, such as lawyers and accountants, where needed
• regulators, law enforcement or courts, where the law requires it

Our suppliers act on our instructions under written contracts that require them to keep information secure.

International transfers

Netlify and Google are based in the United States. Transfers to them are covered by the UK Extension to the EU-US Data Privacy Framework, and where that does not apply, by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Where any other supplier processes personal information outside the UK, we make sure an equivalent safeguard is in place.

How long we keep it

• Enquiries that do not lead to work: up to 24 months from our last contact, so we have the context if you get in touch again.
• Client records: for the length of our engagement and six years after it ends, to meet our legal and contractual obligations.
• Website request logs: for the short period our hosting provider retains them.
• Google Analytics data: 14 months, after which Google deletes it automatically.

We then delete or anonymise the information.

How we protect it

Our own management systems are certified to ISO/IEC 27001 (information security) and ISO 22301 (business continuity) by BSI. Access to personal information is limited to the people who need it to do their job.

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use it, or object to us using it
• ask us to transfer information you gave us to another organisation
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email info@ktsecure.co.uk or write to us at the address above. There is normally no charge.

We may need to confirm your identity before we act on a request. We will reply within one calendar month. If we need more information from you to deal with the request, that month starts once we have it. For complex or multiple requests, we may extend the deadline by up to two further months, and we will tell you within the first month if we need to.

Some rights are not absolute. For example, we may need to keep certain records to meet a legal obligation or to establish or defend legal claims. If we cannot do what you ask, we will explain why.

Complaints

If you are unhappy with how we have handled your information, please contact us first at info@ktsecure.co.uk. We will acknowledge your complaint within 30 days and investigate it without undue delay.

You also have the right to complain to the UK’s data protection regulator, the Information Commission (formerly the Information Commissioner’s Office), at ico.org.uk.

Links to other websites

This website links to other websites, such as our LinkedIn page. Those websites have their own privacy policies, and we are not responsible for how they handle your information.

Changes to this policy

We review this policy regularly and will update this page when anything changes. The date at the top shows when it was last updated.